This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: g0RufVQ6esTovgUoSOrj+LP/Jxxr+G3vuAseZ2ksirQ= Subject key identifier: 3D:BE:2C:D3:31:70:01:3D:1B:6C:88:CE:7B:C1:0B:60:1A:BD:CF:28 Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 040F Signing time: Thu 18 Dec 2025 23:44:01 +0000 Manifest this update: Thu 18 Dec 2025 23:44:01 +0000 Manifest next update: Thu 25 Dec 2025 23:44:01 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: wZ2eY6flxRCgktfQUUpOVr5DduxlToSRHGG9bbALJK0=) 2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: hgdL5UTkf8oZABpJrnOGmK5k+01vc9XVo1jTsrlgdWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Validity Not Before: Dec 18 23:44:01 2025 GMT Not After : Dec 25 23:44:01 2025 GMT Subject: CN=694491c1-0f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:17:ff:68:8a:e7:36:b6:f8:e4:42:2c:30:ee: 76:e8:58:8c:1d:16:68:e3:4e:13:1d:42:26:94:f4: db:99:e1:2e:3f:2b:67:08:1b:28:98:ec:dd:a1:f2: a3:d4:d8:1e:5c:f5:4a:c2:39:4a:fd:a8:4f:39:ee: cd:12:eb:e2:bf:6d:a4:1d:0e:8e:45:14:c6:54:f2: 44:f3:4a:9f:9f:37:15:5c:a5:d6:33:89:62:41:92: 51:8b:81:97:d6:d6:97:e4:25:a4:78:2c:23:36:81: 4e:63:86:97:ec:5b:49:d2:9a:84:6f:6c:18:03:58: fd:03:d7:8a:c5:7e:3a:b8:ad:f7:2f:d3:03:f6:b8: 2e:3c:7b:9d:8a:a3:3e:ef:f5:95:5c:74:c3:3a:8d: 63:7f:ee:b5:4a:36:50:fa:ce:d8:05:f4:79:06:a1: 4b:66:86:8a:54:7b:22:79:7c:23:dd:81:6c:a1:62: d4:9b:68:e6:4b:84:bf:32:17:ed:23:a5:45:b4:be: b5:5d:f8:eb:14:b5:6e:11:ee:d2:38:56:c8:f3:e7: 3d:51:a1:1c:94:8c:93:a8:8d:92:cc:c2:c3:22:30: 98:87:8c:c0:56:3b:7f:7e:8a:e1:40:cf:2a:e6:48: 21:3e:d1:2d:21:d2:04:48:c9:ef:9e:72:2b:0f:f0: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BE:2C:D3:31:70:01:3D:1B:6C:88:CE:7B:C1:0B:60:1A:BD:CF:28 X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:04:af:ad:86:08:7d:e3:19:56:26:e6:37:ef:8b:47:84:ee: a7:c4:c9:df:fa:47:7b:e7:18:d9:1c:37:c2:44:8f:3b:dc:91: da:ed:ce:7f:e4:b9:0c:e6:c6:81:46:98:4a:3f:cc:6c:d7:a3: 38:c4:10:30:07:64:55:1d:a1:fb:94:f6:d1:a3:45:87:8c:fc: 88:7e:90:2a:f9:09:99:63:2a:76:96:1a:ad:c2:bc:d4:94:47: 9e:f0:3c:ee:a6:09:e3:83:be:f9:2b:ec:67:50:a1:f7:8a:70: 4d:61:7f:ba:ac:0e:c0:74:b2:6f:70:8a:32:e6:6c:15:43:9e: fe:31:e2:0f:a6:79:a4:e8:17:7d:4a:67:05:b6:95:1b:96:b9: bf:45:17:04:02:a0:0b:8a:9c:11:9e:ba:ce:7f:4f:f6:d2:78: fd:66:57:57:0c:ad:bf:91:27:23:90:25:d1:73:a7:a4:67:f3: 17:42:89:6b:2d:bb:68:05:75:49:e5:a9:66:e6:d4:54:36:ee: c0:d6:32:ad:1d:ad:b2:ba:41:ff:84:01:37:fe:84:c3:fd:9e: 8c:4b:b4:9a:b2:aa:fb:cf:e1:67:26:9c:07:80:6f:86:9c:8b: 43:e4:70:25:f6:28:08:98:65:53:71:b3:1b:98:7a:42:33:a7: 45:e0:35:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjUxMjE4MjM0NDAxWhcNMjUxMjI1MjM0NDAxWjAYMRYwFAYD VQQDDA02OTQ0OTFjMS0wZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxf/aIrnNrb45EIsMO526FiMHRZo404THUImlPTbmeEuPytnCBsomOzdofKj 1NgeXPVKwjlK/ahPOe7NEuviv22kHQ6ORRTGVPJE80qfnzcVXKXWM4liQZJRi4GX 1taX5CWkeCwjNoFOY4aX7FtJ0pqEb2wYA1j9A9eKxX46uK33L9MD9rguPHudiqM+ 7/WVXHTDOo1jf+61SjZQ+s7YBfR5BqFLZoaKVHsieXwj3YFsoWLUm2jmS4S/Mhft I6VFtL61XfjrFLVuEe7SOFbI8+c9UaEclIyTqI2SzMLDIjCYh4zAVjt/forhQM8q 5kghPtEtIdIESMnvnnIrD/AXHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2+LNMx cAE9G2yIznvBC2Aavc8oMB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVBK+thgh94xlWJuY374tHhO6nxMnf+kd75xjZHDfCRI873JHa7c5/ 5LkM5saBRphKP8xs16M4xBAwB2RVHaH7lPbRo0WHjPyIfpAq+QmZYyp2lhqtwrzU lEee8Dzupgnjg775K+xnUKH3inBNYX+6rA7AdLJvcIoy5mwVQ57+MeIPpnmk6Bd9 SmcFtpUblrm/RRcEAqALipwRnrrOf0/20nj9ZldXDK2/kScjkCXRc6ekZ/MXQolr LbtoBXVJ5alm5tRUNu7A1jKtHa2yukH/hAE3/oTD/Z6MS7Sasqr7z+FnJpwHgG+G nItD5HAl9igImGVTcbMbmHpCM6dF4DWe -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:53 2025 by rpki-client